CVE-2026-58379
published 2026-07-03CVE-2026-58379: A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code…
PriorityP340high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.37%
30.2th percentile
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gimp | gimp | — | — |
| gimp | gimp | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_update_services_for_sap_solutions | — | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
vendor_redhat7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
GIMP PSP Image heap-based overflow (EUVD-2026-41560)
vuldb·2026-07-03·CVSS 7.3
CVE-2026-58379 [HIGH] GIMP PSP Image heap-based overflow (EUVD-2026-41560)
A vulnerability, which was classified as critical, has been found in GIMP. Affected by this vulnerability is an unknown functionality of the component PSP Image Handler. Performing a manipulation results in heap-based buffer overflow.
This vulnerability is reported as CVE-2026-58379. The attack is possible to be carried out remotely. No exploit exists.
GHSA
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.
ghsa_unreviewed·2026-07-03
CVE-2026-58379 [HIGH] CWE-122 A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.
Red Hat
gimp: gimp: Heap buffer overflow in read_channel_data()
vendor_redhat·2026-04-11·CVSS 7.3
CVE-2026-58379 [HIGH] CWE-122 gimp: gimp: Heap buffer overflow in read_channel_data()
gimp: gimp: Heap buffer overflow in read_channel_data()
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.
Statement: This is an Important severity flaw in GIMP's Paint Shop Pro (PSP) file format parser. A heap buffer overflow can occur when processing a specially crafted PSP file, potentially leading to arbitrary code execution or denial of service. Exploitation requires user interaction, as a malicious file must be
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data() [fedora-all]
bugzilla·2026-07-03·CVSS 7.8
CVE-2026-58379 [HIGH] CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data() [fedora-all]
CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap buffer overflow write vulnerability exists in GIMP's Paint Shop Pro (PSP) file format parser. In read_channel_data() in file-psp.c, for low bit-depth images (depth=1 or 4), line_width uses a packed formula (8 pixels/byte) but fread() reads width bytes (1 byte/pixel). For example, with width=33 and depth=1: allocates 4 bytes, writes 33 — a 29-byte heap overflow.
This is a variant of CVE-2026-4153 (commit 98cb1371), which fixed read_layer_block() but left the buf allocation in re
Bugzilla
CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data()
bugzilla·2026-07-01·CVSS 7.8
CVE-2026-58379 [HIGH] CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data()
CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data()
A heap buffer overflow write vulnerability exists in GIMP's Paint Shop Pro (PSP) file format parser. In read_channel_data() in file-psp.c, for low bit-depth images (depth=1 or 4), line_width uses a packed formula (8 pixels/byte) but fread() reads width bytes (1 byte/pixel). For example, with width=33 and depth=1: allocates 4 bytes, writes 33 — a 29-byte heap overflow.
This is a variant of CVE-2026-4153 (commit 98cb1371), which fixed read_layer_block() but left the buf allocation in read_channel_data() unpatched.
- Function: read_channel_data()
- File: plug-ins/common/file-psp.c:1558-1784
- Fix: https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167
- Hardening: https://gitlab.gnome.org/GNOME/gimp/-/commit/20b00d6d
- U
https://access.redhat.com/errata/RHSA-2026:38496https://access.redhat.com/errata/RHSA-2026:73768https://access.redhat.com/errata/RHSA-2026:80509https://access.redhat.com/security/cve/CVE-2026-58379https://bugzilla.redhat.com/show_bug.cgi?id=2495997https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167https://gitlab.gnome.org/GNOME/gimp/-/issues/16205
2026-07-03
Published